What's New in v9.2.2
🔐 Basic Auth Prompt Restored with MCP OAuth Enabled
Version 9.2.2 is a focused patch release that restores the browser Basic Auth prompt for the UI and REST API when MCP OAuth 2.1 is enabled. OAuth and Basic authentication for the MCP endpoint continue to work as before.
🐛 Bug Fixes
OAuth Middleware Scoped to MCP
- Limits the OAuth-or-Basic authentication challenge to the
/mcptransport instead of intercepting unrelated routes registered later - Restores the standard Basic Auth challenge for the UI, REST API, and favicon requests, allowing browsers to display their native credential prompt
- Preserves both OAuth Bearer token and existing Basic Auth access to MCP
- Adds regression coverage for root deployments and installations using
APP_BASE_PATH
What's Changed
- fix(auth): scope OAuth middleware to MCP by @aldinokemal
- chore(release): update
AppVersiontov9.2.2by @aldinokemal
Contributors
Full Changelog: v9.2.1...v9.2.2